CVEs published December 18, 2023
104 CVEs were published on December 18, 2023: 3 critical, 19 high.
- Published
- 104
- Critical
- 3
- High
- 19
- Medium
- 63
- Low
- 6
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 36
Most affected products
- Zabbix
- 4
- Export any WordPress data to XML/CSV · WP All Export Pro
- 3
- Gallagher Controller
- 3
- Bosch Camera Firmware
- 2
- Gallagher Command Centre Server
- 2
- Michael Winkler teachPress
- 2
- Quttera Web Malware Scanner
- 2
- Red Hat Data Grid · Red Hat JBoss Enterprise Application… +1
- 2
- Red Hat Enterprise Linux
- 2
- AdFoxly – Ad Manager, AdSense Ads & Ads.txt
- 1
Critical 3
- CVE-2023-32725Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.Zabbix
- CVE-2023-6483Improper Authentication Vulnerability in ADiTaaS ADiTaaS Allied Digital Integrated Tool-as-a-Service
- CVE-2023-6906Totolink A7100RU HTTP POST Request main buffer overflowTotolink A7100RU
High 19
- CVE-2023-49819WordPress Structured Content Plugin <= 1.5.3 is vulnerable to PHP Object InjectionGordon Böhme, Antonio Leutsch Structured Content (JSON-LD)…
- CVE-2023-47506WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL InjectionMaster Slider Pro
- CVE-2023-47530WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL InjectionWPVibes Redirect 404 Error Page to Homepage or Custom Page…
- CVE-2023-47558WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL InjectionMahlamusa Who Hit The Page – Hit Counter
- CVE-2023-33331WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL InjectionWooCommerce Product Vendors
- CVE-2023-34168WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL InjectionAlex Raven WP Report Post
- CVE-2023-24590 A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some instaGallagher Controller
- CVE-2023-4724WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCEExport any WordPress data to XML/CSV · WP All Export Pro
- CVE-2023-6222Quttera Web Malware Scanner < 3.4.2.1 - Admin+ Path TraversalQuttera Web Malware Scanner
- CVE-2023-6691Code Injection vulnerability in Cambium ePMP Force 300-25Cambium ePMP Force 300-25
- CVE-2023-6817Use-after-free in Linux kernel's netfilter: nf_tables componentLinux Kernel
- CVE-2023-5384Infinispan: credentials returned from configuration as clear textRed Hat Data Grid · org.infinispan:infinispan-core +7
- CVE-2023-4320Satellite: arithmetic overflow in satelliteRed Hat Satellite 6.15 for RHEL
- CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode propertyperl · Red Hat Enterprise Linux
- CVE-2023-3430Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cppOpenImageIO · Fedora Extra Packages for Enterprise Linux +1
- CVE-2023-32230An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to causBosch Video Recording Manager · Bosch Video Streaming Ga… +3
- CVE-2023-39509A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary cBosch Camera Firmware
- CVE-2023-6909Path Traversal: '\..\filename' in mlflow/mlflowmlflow/mlflow · mlflow
- CVE-2023-50981ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER pub
Medium, low and unrated 82
- CVE-2023-46212WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access ControlTienCOP WP EXtra
- CVE-2023-46154WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object InjectionE2Pdf.com E2Pdf – Export To Pdf Tool for WordPress
- CVE-2023-47754WordPress Delete Duplicate Posts Plugin <= 4.8.9 is vulnerable to Broken Access ControlClever plugins Delete Duplicate Posts
- CVE-2023-48751WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access ControlRoland Barker, xnau webdesign Participants Database
- CVE-2022-45809WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race ConditionRicard Torres Thumbs Rating
- CVE-2023-6918Libssh: missing checks for return values for digestsRed Hat Enterprise Linux
- CVE-2023-6927Keycloak: open redirect via "form_post.jwt" jarm response modeRed Hat build of Keycloak · Red Hat Single Sign-On +2
- CVE-2023-49821WordPress LiveChat Plugin <= 4.5.15 is vulnerable to Cross Site Request Forgery (CSRF)LiveChat – WP live chat plugin for WordPress
- CVE-2023-49763WordPress CSprite Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)Creatomatic CSprite
- CVE-2023-49761WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)Gravity Master Product Enquiry for WooCommerce
- CVE-2023-49760WordPress WPsoonOnlinePage Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)Giannopoulos Kostas WPsoonOnlinePage
- CVE-2023-49759WordPress WooDiscuz – WooCommerce Comments Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)gVectors Team WooDiscuz – WooCommerce Comments
- CVE-2023-49163WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF)Michael Winkler teachPress
- CVE-2023-49155WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Button Generator – easily Button Builder
- CVE-2023-49153WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)Saiful Islam Add to Cart Text Changer and Customize Button,…
- CVE-2023-49148WordPress Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates Plugin <= 3.0.5 is vulnerable to Cross Site Request Forgery (CSRF)Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and C…
- CVE-2023-48781WordPress MkRapel Regiones y Ciudades de Chile para WC Plugin <= 4.3.0 is vulnerable to Cross Site Request Forgery (CSRF)Marketing Rapel MkRapel Regiones y Ciudades de Chile para WC
- CVE-2023-48778WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)VillaTheme Product Size Chart For WooCommerce
- CVE-2023-48773WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)WP Doctor WooCommerce Login Redirect
- CVE-2023-46686 A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre DiaGallagher Command Centre Diagnostics Service
- CVE-2023-41967 Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of Gallagher Controller
- CVE-2023-23584 An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence oGallagher Command Centre Server
- CVE-2023-23576 Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than inteGallagher Command Centre Server
- CVE-2023-23570 Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with undeGallagher Command Centre
- CVE-2023-48772WordPress Prevent Landscape Rotation Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)Arul Prasad J Prevent Landscape Rotation
- CVE-2023-22439 Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) caGallagher Controller 6000/ Controller
- CVE-2023-48769WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)Blue Coral Chat Bubble – Floating Chat with Contact Chat Ic…
- CVE-2023-6355 Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local Gallagher Controller
- CVE-2023-48768WordPress Quantity Plus Minus Button for WooCommerce by CodeAstrology Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF)CodeAstrology Team Quantity Plus Minus Button for WooCommer…
- CVE-2023-40691IBM Cloud Pak for Business Automation information disclosureIBM Cloud Pak for Business Automation
- CVE-2023-5882WP All Export (Free < 1.4.1, Pro < 1.8.6) - Remote Code Execution via CSRFExport any WordPress data to XML/CSV · WP All Export Pro
- CVE-2023-5949SmartCrawl WordPress SEO checker < 3.8.3 - Unauthenticated Password Protected Post DisclosureSmartCrawl WordPress SEO checker, SEO analyzer, SEO optimiz…
- CVE-2023-6077Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post AccessSlider
- CVE-2023-6295so-widgets-bundle < 1.51.0 - Admin+ Local File InclusionSiteOrigin Widgets Bundle
- CVE-2023-6289Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration ExportSwift Performance Lite
- CVE-2023-5348Product Catalog Enquiry for WooCommerce < 5.0.3 - Unauthenticated Stored XSS via Arbitrary Setting UpdateProduct Catalog Mode For WooCommerce
- CVE-2023-4311Vrm 360 3D Model Viewer <= 1.2.1 - Contributor+ Arbitrary File Upload Leading to RCEVrm 360 3D Model Viewer
- CVE-2023-5886WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRFExport any WordPress data to XML/CSV · WP All Export Pro
- CVE-2023-6065Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data ExposureQuttera Web Malware Scanner
- CVE-2023-6272Theme My Login 2FA < 1.2 - Lack of Rate Limitingtml-2fa
- CVE-2023-5005Autocomplete Location field Contact Form 7 < 3.0 - Admin+ Store Cross-Site ScriptingAutocomplete Location field Contact Form
- CVE-2023-6203The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post ReadThe Events Calendar
- CVE-2023-47741IBM i information disclosureIBM i · IBM Db2 Mirror for i
- CVE-2023-48766WordPress SVGator – Add Animated SVG Easily Plugin <= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF)SVGator – Add Animated SVG Easily
- CVE-2023-46617WordPress AdFoxly – Ad Manager, AdSense Ads & Ads.txt Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)AdFoxly – Ad Manager, AdSense Ads & Ads.txt
- CVE-2023-48762WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)Crocoblock JetElements For Elementor
- CVE-2023-48755WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)Michael Winkler teachPress
- CVE-2023-33214WordPress Taggbox Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)Tagbox – UGC Galleries, Social Media Widgets, User Reviews…
- CVE-2023-47806WordPress Disable User Login Plugin <= 1.3.7 is vulnerable to Cross Site Request Forgery (CSRF)Saint Systems Disable User Login
- CVE-2023-47789WordPress WooCommerce Canada Post Shipping Plugin <= 2.8.3 is vulnerable to Cross Site Request Forgery (CSRF)WooCommerce Canada Post Shipping Method
- CVE-2023-47787WordPress WooCommerce Bookings Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)WooCommerce Bookings
- CVE-2022-40312WordPress GiveWP Plugin <= 2.25.1 is vulnerable to Server Side Request Forgery (SSRF)GiveWP – Donation Plugin and Fundraising Platform
- CVE-2023-6778Cross-site Scripting (XSS) - Stored in allegroai/clearml-serverallegroai/clearml-server
- CVE-2023-49840WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)Palscode Multi Currency For WooCommerce
- CVE-2023-49843WordPress First Order Discount Woocommerce Plugin <= 1.21 is vulnerable to Cross Site Request Forgery (CSRF)QuanticEdge First Order Discount Woocommerce
- CVE-2023-49844WordPress WPPerformanceTester Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)Kevin Ohashi WPPerformanceTester
- CVE-2023-49853WordPress PayTR Taksit Tablosu Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)PayTR Ödeme ve Elektronik Para Kuruluşu A.Ş. PayTR Taksit T…
- CVE-2023-46177IBM MQ Appliance information disclosureIBM MQ Appliance
- CVE-2023-6228Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.cRed Hat Enterprise Linux
- CVE-2023-5236Infinispan: circular reference on marshalling leads to dosRed Hat Data Grid · Red Hat build of Apache Camel 4 for… +8
- CVE-2023-5056Skupper-operator: privelege escalation via config mapRed Hat Service Interconnect 1 for RHEL
- CVE-2023-5115Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary filesRed Hat Ansible Automation Platform 2.3 for RHEL · Red H… +2
- CVE-2023-3629Infinispan: non-admins should not be able to get cache config via rest apiRed Hat Data Grid · Red Hat JBoss Enterprise Application… +1
- CVE-2023-3628Infispan: rest bulk ops don't check permissionsRed Hat Data Grid · Red Hat JBoss Enterprise Application… +1
- CVE-2022-41677An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve informatiBosch Camera Firmware
- CVE-2023-35867An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker toBosch BVMS · Bosch Configuration Manager +7
- CVE-2023-28053 Dell NetWorker Virtual Edition versions 19.8 and below contain the use of deprecated cryptographic algorithms in the SSH component.Dell NetWorker Virtual Edition
- CVE-2023-49854WordPress Caddy Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)Tribe Interactive Caddy – Smart Side Cart for WooCommerce
- CVE-2023-49855WordPress BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter Plugin <= 1.49.3 is vulnerable to Cross Site Request Forgery (CSRF)BinaryCarpenter Menu Bar Cart Icon For WooCommerce By Binar…
- CVE-2023-50372WordPress Custom Post Type Page Template Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)Hiroaki Miyashita Custom Post Type Page Template
- CVE-2023-32728Code injection in zabbix_agent2 smart.disk.get caused by smartctl pluginZabbix
- CVE-2023-32727Code execution vulnerability in icmppingZabbix
- CVE-2023-32726Possible buffer overread from reading DNS responsesZabbix
- CVE-2023-6911Multiple WSO2 products have been identified as vulnerable due to improper output encoding, a Stored Cross Site Scripting (XSS) attack can beWSO2 API Manager · WSO2 API Microgateway +6
- CVE-2023-41314Apache Doris: Missing API authentication allowed DoSApache Software Foundation Apache Doris
- CVE-2023-6908DFIRKuiper TAR Archive case_management.py unzip_file path traversalDFIRKuiper Kuiper
- CVE-2023-6907codelyfe Stupid Simple CMS Deletion Interface delete.php improper authenticationcodelyfe Stupid Simple CMS
- CVE-2023-48795The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypasrussh · golang.org/x/crypto +1
- CVE-2023-50979Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.
- CVE-2023-50980gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application crash) via DER public-key data
- CVE-2023-51384In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.
- CVE-2023-51385In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refere